v0.5.3 — Verdicts you can trust

v0.5.3 — verdicts you can trust. Every rule that tells you something about an app was reviewed and checked on real phones (Galaxy S24 and S9).

Trackers

• Firebase Analytics and Crashlytics, the two most common trackers, were never detected. The scan now also reads the libraries an app registers in its manifest, and its disabled components. Measured: apps found with trackers went from 13 to 33 (S24, 515 apps) and from 11 to 33 (S9, 440 apps).
• A scan that failed no longer counts as "clean"; "0 %" next to "1 app with trackers" reads "< 1 %". The Android system package itself could not be scanned (nor its page opened): fixed.
• 43 trackers in the list (a duplicate and two non-trackers removed, Vungle 7 and Facebook's core SDK added). "Clean apps" now reads "No tracker detected": some SDKs leave no trace this method can see.

Privacy score

• The −20 for an accessibility service and for a device admin never applied; they now do. The dangerous permissions are Android's own list (13 were missing, health data included); USE_BIOMETRIC no longer costs points; one penalty per kind of access. The panel shows every deduction.

Protected apps (hold 3 s)

• 38 of 75 built-in app names were wrong: most French banks, Wise, 1Password, Keeper, Doctolib, SNCF Connect… had no warning. Every name was checked on the Play Store and F-Droid. Fitbit is protected; your own list is honoured even right after launch; the reminder quarantine asks for the confirmation too.

Inactive apps, rarely used, Smart Cleaner

• Usage is read live over two years (it was 30 days, from a cache): without usage access the lists stay empty instead of calling every app unused; the keyboard, accessibility, autofill, default SMS and phone apps are never "inactive"; protected apps are never proposed for uninstall.

Permission changes after an update

• An update's new permission now shows as soon as it is requested, before you grant it (database schema 10; your history is kept).

Other

• Damaged settings give the defaults instead of a crash at launch. Privacy policy, Transparency screen and terms (5 languages) describe exactly what is read.

Permissions: 12, unchanged. Still no INTERNET.

Which APK?

• app-manager-tech-universel-0.5.3.apk — universal, for any phone (choose this one if unsure).
• app-arm64-v8a-release.apk — most phones from 2017 on.
• app-armeabi-v7a-release.apk — older 32-bit phones.
• app-x86_64-release.apk — emulators and x86 devices.

Signing certificate SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (unchanged since v0.1.0). Updating from any earlier version keeps your data.

SHA-256 of the files

4bea660c886527fb52ec2a4e170bc1ffb9ef0bf1d809d6c840ad985b2ad5aafa  app-arm64-v8a-release.apk
e4078a6f3587073c0da43e5427b67a2863a2f233bff5daf1eeb021b97d479bb5  app-armeabi-v7a-release.apk
a026b4d478dda94178e4c7a851b1e215aca3604c4e4bdeeba2398586546de52a  app-manager-tech-universel-0.5.3.apk
ea4c7b110edaba9830b4865f9f83ab0ad7a6464f8ae16f8a30f4707c42b909a8  app-x86_64-release.apk

---

v0.5.3 — des verdicts fiables. Chaque règle qui vous dit quelque chose d'une appli a été revue et vérifiée sur de vrais téléphones (Galaxy S24 et S9).

Pisteurs

• Firebase Analytics et Crashlytics, les deux pisteurs les plus répandus, n'étaient jamais détectés. L'analyse lit désormais aussi les bibliothèques qu'une appli enregistre dans son manifeste, et ses composants désactivés. Mesuré : de 13 à 33 applis avec pisteurs (S24, 515 applis), de 11 à 33 (S9, 440 applis).
• Une analyse en échec ne compte plus comme « propre » ; « 0 % » à côté de « 1 appli avec pisteurs » devient « < 1 % ». Le paquet système Android lui-même ne pouvait être ni analysé ni ouvert : corrigé.
• 43 pisteurs dans la liste. « Apps propres » devient « Aucun pisteur détecté » : certains SDK ne laissent aucune trace visible par cette méthode.

Score de confidentialité

• Les −20 pour un service d'accessibilité et pour un administrateur ne s'appliquaient jamais ; c'est corrigé. Les permissions dangereuses sont la liste d'Android (13 manquaient, données de santé comprises) ; USE_BIOMETRIC ne coûte plus de points ; une pénalité par type d'accès. Le panneau montre chaque déduction.

Applis protégées (appui de 3 s)

• 38 des 75 noms intégrés étaient faux : la plupart des banques françaises, Wise, 1Password, Keeper, Doctolib, SNCF Connect… n'avaient aucun avertissement. Chaque nom a été vérifié sur le Play Store et F-Droid. Fitbit est protégée ; votre propre liste est respectée même juste après le lancement ; la quarantaine douce demande aussi la confirmation.

Applis inactives, rarement utilisées, Nettoyeur

• L'usage est lu en direct sur deux ans (30 jours, depuis un cache, auparavant) : sans accès à l'usage, les listes restent vides au lieu de dire toutes les applis inutilisées ; clavier, accessibilité, saisie automatique, SMS et téléphone par défaut ne sont jamais « inactifs » ; les applis protégées ne sont jamais proposées à la désinstallation.

Permissions après une mise à jour

• Une nouvelle permission apparaît dès qu'elle est demandée, avant que vous l'accordiez (base de données en version 10 ; votre historique est conservé).

Autres

• Des réglages abîmés donnent les valeurs par défaut au lieu d'un plantage au lancement. Politique de confidentialité, écran Transparence et conditions (5 langues) disent exactement ce qui est lu.

Permissions : 12, inchangées. Toujours pas d'INTERNET.

Quel APK ? L'universel (app-manager-tech-universel-0.5.3.apk) convient à tous les téléphones ; les trois autres sont propres à une architecture (arm64 : la plupart des téléphones depuis 2017).

Certificat de signature : inchangé depuis la v0.1.0 (empreinte ci-dessus). La mise à jour depuis n'importe quelle version précédente conserve vos données.

v0.5.2 — Home tag filter, dependency updates

v0.5.2 — a tag filter you can leave, dependency updates.

Fixed

• Home: a tag filter that matched no app trapped you. Tapping a tag chip (Work, Family…) that no app carries replaced the whole list with "No apps to show", chip row included: "All" was gone, Back sent the app to the background and tapping Home did nothing. The chips now stay above a "No app matches this filter" message; Back lifts the filter, and tapping Home while on it lifts the filter and returns to the top of the list.
• Back from Tools or About returns to Home instead of leaving the app.

Dependencies

• DataStore Preferences 1.3.0 (Okio 3.17.0), DocumentFile 1.1.0, kotlinx-serialization-core 1.12.0, Gradle 9.8.2. Settings saved by 0.5.1 are kept on update.

Legal texts

• Terms of use: a liability clause that holds. Privacy policy: what happens to an e-mail you send to the developer.

Permissions: 12, unchanged since v0.5.1. Still no INTERNET.

Which APK?

• app-manager-tech-universel-0.5.2.apk — universal, for any phone (choose this one if unsure).
• app-arm64-v8a-release.apk — most phones from 2017 on.
• app-armeabi-v7a-release.apk — older 32-bit phones.
• app-x86_64-release.apk — emulators and x86 devices.

Signing certificate SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (unchanged since v0.1.0). Updating from any earlier version keeps your data.

SHA-256 of the files

0182323c8dcedb34ba7335a8557dc7b8ef76975a52679961d3e080a139fac21f  app-arm64-v8a-release.apk
c2bd983c9f76fc3450488fff8e22afe3fb56e08fcf0f5142fdbb62eabb02b8b2  app-armeabi-v7a-release.apk
c089849af6dd6b2ea165fa714d1449460cd1418d7897608b8d328b37098df9a9  app-manager-tech-universel-0.5.2.apk
84e7aa4256593f8cb2980212146592312ba2d7f1b2d535000dcb7e7551abef1c  app-x86_64-release.apk

---

v0.5.2 — un filtre par tag dont on peut sortir, dépendances à jour.

Corrigé

• Accueil : un filtre par tag sans résultat vous enfermait. Toucher une puce (Travail, Famille…) qu'aucune app ne porte remplaçait toute la liste par « Aucune application à afficher », puces comprises : « Tous » disparaissait, Retour mettait l'appli en arrière-plan et toucher Accueil ne faisait rien. Les puces restent désormais au-dessus d'un message « Aucune application pour ce filtre » ; Retour lève le filtre, et toucher Accueil quand on y est lève le filtre et remonte en haut de la liste.
• Retour depuis Outils ou À propos ramène à l'Accueil au lieu de quitter l'appli.

Dépendances

• DataStore Preferences 1.3.0 (Okio 3.17.0), DocumentFile 1.1.0, kotlinx-serialization-core 1.12.0, Gradle 9.8.2. Les réglages de la 0.5.1 sont conservés à la mise à jour.

Textes légaux

• Conditions d'utilisation : une clause de responsabilité qui tient. Confidentialité : ce que devient un e-mail envoyé au développeur.

Permissions : 12, inchangées depuis la v0.5.1. Toujours pas d'INTERNET.

Quel APK ? L'universel (app-manager-tech-universel-0.5.2.apk) convient à tous les téléphones ; les trois autres sont propres à une architecture (arm64 : la plupart des téléphones depuis 2017).

Certificat de signature : inchangé depuis la v0.1.0 (empreinte ci-dessus). La mise à jour depuis n'importe quelle version précédente conserve vos données.

v0.5.1 — Quarantine restore, legal texts

v0.5.1 — quarantine restore fixed and verified, notifications on Android 13+, legal texts rewritten from the code.

Fixed

• Restoring a quarantined app did nothing since v0.2.0: the system installer refuses a request from an app that does not declare REQUEST_INSTALL_PACKAGES. The permission is now declared (the 12th). Android still asks you to allow installs from App Manager Tech, then to confirm each one.
• A restore installs only the very file that was saved. The backup's SHA-256 is recorded when it is written, and the backup is read back to check it before the app is uninstalled. A restore copies the backup into the app's private storage, checks that copy and hands the installer that verified copy only. A backup that was changed, saved before 0.5.1, or cannot be read is refused, with a message saying why.
• A cancelled or refused restore no longer loses the quarantine: the entry used to be dropped as soon as the installer opened. It now goes only once the app is actually reinstalled.
• Apps installed as split APKs (most Play Store apps) and system apps can no longer be put in real quarantine: their backup could never reinstall them. They are refused before anything is saved or uninstalled; "Reminder only" stays available.
• Notifications never appeared on Android 13+: the permission was never requested. It is now asked when you turn a notification on, and once at launch when one already is.
• Turning a history off now erases it (lifecycle history, action journal, permission changes), as the privacy policy says. It used to keep the data forever.
• Protected apps: batch uninstall and the security-audit uninstall skipped the 3-second hold. A batch warning now counts every protected app, not just the first.
• Three settings did nothing: default sort order, show system apps, confirm before clearing the cache. All three now apply.
• Permission-change history lost changes before their retention period. Fixed.
• Smart Cleaner no longer flags every uncategorised app as a duplicate.
• Retry on the app list error screen did nothing; it now rescans.
• Texts that promised what the app does not do (exclusion list, export, "Reminder only", lifecycle history, force stop) now say what it does; dialogs show app names instead of package names.

Legal texts

• Privacy policy and terms of use rewritten from the code, in English, French, German, Italian and Spanish (the French version prevails). They wrongly announced F-Droid distribution, left out the histories and their retention, the files written outside the app and half the permissions, and named no publisher. Linked from About, in the app's language.
• Transparency screen rewritten: it claimed an exhaustive list that was not.

Changed

• About: a Legal section, a files-tech.com link, and a "Check for updates" button that opens this page in your browser (the app has no Internet access).
• Splash screen shows the whole logo; light theme in Agenda Tech's pale blue; logo and app name in the top bar.

Permissions: 12, one more than v0.5.0 (REQUEST_INSTALL_PACKAGES, for the restore). Still no INTERNET.

Which APK?

• app-manager-tech-universel-0.5.1.apk — universal, for any phone (choose this one if unsure).
• app-arm64-v8a-release.apk — most phones from 2017 on.
• app-armeabi-v7a-release.apk — older 32-bit phones.
• app-x86_64-release.apk — emulators and x86 devices.

Signing certificate SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (unchanged since v0.1.0). Updating from any earlier version keeps your data. A real quarantine made before 0.5.1 recorded no fingerprint: the app cannot check its backup, so it does not install it; the file stays in your backup folder.

SHA-256 of the files

4fa1bf065a88817a48921a397a533bcd94e36ca98281ac8fd95a7411ae1760b2  app-arm64-v8a-release.apk
ee81fc31855059d850602443286d51af3f7118f612225d96fcf757290ef9f3a5  app-armeabi-v7a-release.apk
b4bfc3d8e92de51617174b98c10eb4d1af4b2642c8a4689fd4273cd3f02eca9c  app-manager-tech-universel-0.5.1.apk
b4d3e630e58657e036abd424953ce417c57ef2f2c7f0e51a85a8096f8c21d005  app-x86_64-release.apk

v0.5.0 — German, Italian and Spanish

v0.5.0 — German, Italian and Spanish; every message in your language; audit fixes.

New

• German, Italian and Spanish, alongside English and French. On Android 13 and later, the app's language can be picked on its own: Settings → Appearance → App language.
• Every message follows your language: errors, confirmations, notification channels, tracker categories, smart-cleaner reasons, app-op states. Five messages used to be hard-coded in French, and some errors were shown as raw text such as Validation(message=Invalid package name). Counts use real plurals (no more "1 days").

Fixed

• Expert view: an app-op was shown by its mode alone, so the camera of an app without the CAMERA permission read "Allowed". It now says "Permission not declared" or "Permission not granted" when that is the case.
• The cache notification no longer rings and vibrates again at every background scan.
• Leaving a screen during an action (trash, quarantine) is no longer reported as a database error.
• Misleading texts:
  • the rarely-used advice said to raise the threshold to see more apps; raising it narrows the list;
  • the warning shown before acting on a critical app was garbled ("If you Empty the trash this app…");
  • "apps cached" actually counted every app.
• Real quarantine (APK backup):
  • a copy that fails no longer leaves a broken APK in your folder;
  • a folder Android will not grant lasting access to is refused when you pick it, instead of failing later.
• Backups and phone-to-phone transfer no longer carry this phone's app history to another device, where it would show changes that never happened.
• About: removed a link to an F-Droid page that does not exist. App Manager Tech is not on F-Droid.

Under the hood

• Newer Android libraries: Compose 1.12, Material 3 1.4, AGP 9.4, Kotlin 2.4.
• Every change is now built and tested in CI:
  • unit tests and instrumented tests;
  • lint and detekt;
  • translation parity checks;
  • a check that the release APK declares no INTERNET permission.

No new permission: the APK declares the same 11 as v0.4.0, and no INTERNET.

Which APK?

• app-manager-tech-universel-0.5.0.apk — universal, for any phone (choose this one if unsure).
• app-arm64-v8a-release.apk — most phones from 2017 on.
• app-armeabi-v7a-release.apk — older 32-bit phones.
• app-x86_64-release.apk — emulators and x86 devices.

Signing certificate SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (unchanged since v0.1.0). Updating from any earlier version keeps your data.

SHA-256 of the files

2c25d9399fdb4831ad6b2acb2b446ed7f1feefc94ba821a6bad99cb5fef4d8d1  app-arm64-v8a-release.apk
8366c31a8f582efb21528abc2880ce70da3873a18170df18cff4943b9ef6e539  app-armeabi-v7a-release.apk
6c8af80edd9a9b08d2c2ba756377fb118d5210be0f50174857dbf7230e9b561b  app-manager-tech-universel-0.5.0.apk
504c36f8740fc4714f565c62692d9792d58bfb5fd94baf4f2bbc6dd2a0577a2c  app-x86_64-release.apk

v0.4.0 — Action Journal (forensic timeline) + full-app polish

v0.4.0 — AMT Action Journal + full-app polish.

• AMT Action Journal (forensic timeline) — new opt-in Room v8 table amt_action_event recording every destructive / state-changing action AMT itself dispatches (uninstall, force-stop, disable/enable, clear cache/data, move-to-trash, restore, quarantine HARD/SOFT). Distinct from the existing Lifecycle History which logs OS broadcasts from ANY installer. Wired through 13 destructive call sites across 6 ViewModels (AppDetail, AppList batch, Trash, Smart Cleaner, Security Audit). 30/90/All window picker. Settings toggle + retention 30–365 days.
• AmtActionLogger — singleton with AtomicBoolean feature gate fed by a hot distinctUntilChanged collector. log(...) is non-suspend fire-and-forget — zero-cost when the journal is OFF.
• Audit-deferred v0.3.4 fixes shipped :
  • HashUtils.kt extracted (cert fingerprint format + content-hash format + streamed APK file hash). Two prior private SHA-256 implementations now delegate.
  • @IoDispatcher injected across 9 ViewModels + 2 data-layer classes. Zero Dispatchers.IO hardcoded remain in the codebase.
  • FilterChip parity across every filter-row surface (LifecycleHistory + PermissionDrift WindowPickers).
  • LifecycleEvent.apkSha256 default param removed — strict constructor-exhaustive domain convention.
• Full-app audit fixes (objectif 95+/100) :
  • hasUsageStatsAccess() AppOps IPC moved off main thread in 4 VMs (AppList + RarelyUsed + Zombies + SmartCleaner) — both constructor and onResumed.
  • Dispatchers.IO → @IoDispatcher in TrashRepositoryImpl.purgeOrphaned + ApkBackupManager.backupApk.
  • Smart Cleaner + Security Audit now feed the Action Journal (audit D2 — coverage was incomplete).
  • applyLifecyclePurgeScheduling added to MainApplication.syncBackgroundWorkers cold-start (audit D3).

---

Quel APK choisir ?

app_manager_tech-universel-v0.4.0.apk — universel (toutes architectures, tous téléphones)

---

Cert SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (stable since v0.1.0).

0 GMS, 0 INTERNET, 0 proprietary dependency, 0 new runtime permission. F-Droid friendly. Room v7→v8 migration strictly additive (CREATE TABLE + 3 indices), MigrationTest_v7_v8 covers it.

v0.3.4 — Multi-tags + tag filter + tag stats + APK SHA-256 forensics

v0.3.4 — Multi-tags + tag filter + tag stats + APK SHA-256 forensics.

• Multi-tag per app: WORK / FAMILY / GAME / TOOLS / MEDIA combine freely. DataStore wire format pkg=TAG1|TAG2 with backward-compat decode of the v0.3.3 single-tag format (no data loss on upgrade).
• Tag filter on the AppList: horizontal FilterChip row, OR semantics across selected chips. Untagged apps excluded once a filter is active. Inline tag badges on every row.
• Tag distribution card in Settings: per-tag count + unique-tagged-packages footer. Empty state surfaces the onboarding hint instead of hiding.
• APK SHA-256 forensics on Lifecycle events: Room v6 → v7, new apk_sha256 column captured via MessageDigest.SHA-256 streamed at 64 KB. Red ⚠ tamper badge surfaces on REPLACED rows that share the same versionCode as the prior event but a different APK digest (repackage / sideload swap signal). Defence-in-depth: canonical path → install-root prefix whitelist → 500 MB hard cap.

Pre-release audit fixes (2 HIGH + 4 MEDIUM/LOW) applied : APK hash size cap + symlink-traversal guard, decoder cap on tag arity, TagPickerDialog double-toggle hardening, decoder pkg validation symmetry, tamper-alert wording precision, stats empty-state hint, OptIn cleanup.

Cert SHA-256: 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF (stable since v0.1.0).

0 GMS, 0 INTERNET, F-Droid friendly. Room migration MIGRATION_6_7 strictly additive, MigrationTest_v6_v7 covers it.

v0.3.3 — Signature clusters + Custom tags + Hibernation parity

v0.3.3 — Signature clusters + Tags + polish

• "Signature clusters" tool : groups apps by signing
  cert SHA-256. Spot "two apps from the same editor"
  • transparency on common signers.
• Custom tags : assign one of 5 presets (Work, Family,
  Game, Tools, Media) to any app via the chip on
  AppDetail. Device-local.
• Hibernation chip parity : also on RarelyUsed (was
  Zombies-only in v0.3.2).
• No new permission, Room schema unchanged.

---

Cert SHA-256 (stable since v0.1.0): 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF

Full release notes: see CHANGELOG.md.

v0.3.2 — Hibernation + Perm delta + Lifecycle PDF

v0.3.2 — Hibernation + Perm delta + PDF polish

• RarelyUsed: search bar by label or package.
• OS hibernation status surfaced on AppDetail +
  Zombies chip (UsageStatsManager.isAppInactive,
  Room schema v6 additive migration).
• Lifecycle REPLACED rows show dangerous permissions
  gained by the update (supply-chain creep signal).
• Lifecycle journal section in the diagnostic PDF
  (last 200 events, hidden when empty).

---

Cert SHA-256 (stable since v0.1.0): 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF

Full release notes: see CHANGELOG.md.

v0.3.1 — Safety Phase B + Lifecycle polish

v0.3.1 — Safety Phase B + Lifecycle polish

• Safety Guardrails extended: 3-second hold confirmation
  now also gates Disable, Trash uninstall, Empty trash,
  and SmartCleaner uninstall (was only Uninstall + HARD
  quarantine).
• New "Protected apps" Settings: read-only built-in lists
  • your own additions, capped at 200.
• Lifecycle: inline 5-event timeline on AppDetail,
  stats card on History (counts + top reasons).
• Zombies: search bar by label or package.

---

Cert SHA-256 (stable since v0.1.0): 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF

Full release notes: see CHANGELOG.md.

v0.3.0 — App Lifecycle History

v0.3.0 — App Lifecycle History

• New "App lifecycle" tool: append-only history of every
  install / uninstall / update on the device. Opt-in
  PackageMonitor receiver (OFF by default). Baseline
  scan on enable so already-installed apps are listed.
• Optional uninstall-reason dialog (5 choices, skippable).
• Timeline 30j / 90j / All filter.
• Retention 30..365 days, 24h purge worker.
• No network, no new permission.
• Bug fix: MainActivity FlowOperator lint.

---

Cert SHA-256 (stable since v0.1.0): 76:E8:77:2E:09:95:13:69:40:5F:58:E7:0C:4A:FF:FD:41:C4:68:75:53:C6:CF:A0:3D:08:14:5F:F6:0F:F1:CF

Full release notes: see CHANGELOG.md.